2026-10-13 15:34:47 -04:00
|
|
|
|
# Copy to .env next to docker-compose.yml and fill in. Never commit .env.
|
|
|
|
|
|
|
|
|
|
|
|
PORT=3100
|
|
|
|
|
|
|
|
|
|
|
|
# Google sign-in — the OAuth "Web application" client ID from Google Cloud Console.
|
|
|
|
|
|
# See README.md › "Set up Google sign-in". Leave empty to disable Google sign-in.
|
|
|
|
|
|
GOOGLE_CLIENT_ID=
|
|
|
|
|
|
|
2026-10-14 14:20:25 -04:00
|
|
|
|
# Only Google accounts on these domains can sign in (comma-separated). Both church
|
|
|
|
|
|
# domains are Google Workspace domains, so both are allowed by default.
|
|
|
|
|
|
ALLOWED_DOMAINS=waterschurch.org,waters.church
|
2026-10-13 15:34:47 -04:00
|
|
|
|
|
|
|
|
|
|
# These people are always admins (comma-separated). The very first person to sign in
|
|
|
|
|
|
# also becomes an admin.
|
|
|
|
|
|
ADMIN_EMAILS=you@waterschurch.org
|
|
|
|
|
|
|
|
|
|
|
|
# Optional break-glass password for the ADMIN_EMAILS accounts, for when Google sign-in
|
|
|
|
|
|
# is not set up yet or is broken. Use something long. Leave empty to disable.
|
|
|
|
|
|
ADMIN_PASSWORD=
|
|
|
|
|
|
|
|
|
|
|
|
# Name of the first workspace created on an empty database.
|
|
|
|
|
|
ORG_NAME=Waters Church
|
|
|
|
|
|
|
|
|
|
|
|
# Local development only: passwordless sign-in for any allowed-domain email.
|
|
|
|
|
|
# Ignored when NODE_ENV=production (which the Docker image sets).
|
|
|
|
|
|
# DEV_LOGIN=1
|